---
title: "Revoke an OAuth grant (Connected apps)"
method: DELETE
path: "/api/me/connected-apps/{grantId}"
tags: ["Tokens"]
---

# Revoke an OAuth grant (Connected apps)

`DELETE /api/me/connected-apps/{grantId}`

## Request

- Base URL: `https://tre-app.com`
- URL: `https://tre-app.com/api/me/connected-apps/{grantId}`
- Auth: one of:
  - API key in cookie `__Secure-authjs.session-token`
  - API key in cookie `authjs.session-token`

Requires the authenticated web session; every Bearer token, including admin scope, receives 403 FORBIDDEN (Connected apps require the web session). Revokes the grant, every access token it issued, and consumes its refresh tokens. Another users grant answers 404.

## Response `204`

No content

## Other responses

- `400`: Invalid request
- `401`: Unauthenticated
- `403`: Connected apps require the web session; Bearer tokens cannot revoke grants
- `404`: Not found
- `409`: Conflict
- `429`: Rate limited
- `500`: Internal server error
- `503`: Temporarily unavailable

---

[API](https://skmtc.dev/tre-app/apis/tre-rest-api.md) · [All operations](https://skmtc.dev/tre-app/apis/tre-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tre-app/apis/tre-rest-api/revisions/26a7187a05fc?raw)